Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/OqG0ygI2LXMoTtyfOweLmbhK-yo.roa
File: OqG0ygI2LXMoTtyfOweLmbhK-yo.roa (raw, json)
Hash identifier: 9pEDkM0fbbe4xk23T9VaGkk/VCfN2VZ/Dfc4hE5geKk=
Subject key identifier: 3A:A1:B4:CA:02:36:2D:73:28:4E:DC:9F:3B:07:8B:99:B8:4A:FB:2A
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 17696DC8
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/OqG0ygI2LXMoTtyfOweLmbhK-yo.roa
Signing time: Sat 01 Jan 2022 09:54:06 +0000
ROA not before: Sat 01 Jan 2022 09:54:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202534
IP address blocks: 62.228.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392785352 (0x17696dc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 09:54:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3aa1b4ca02362d73284edc9f3b078b99b84afb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:a3:c0:bb:08:7f:a4:43:d9:c9:9d:c1:8f:
b6:06:3e:34:b5:14:c0:be:6e:de:55:d6:0a:6d:a9:
0b:75:51:b1:2d:52:ae:1d:04:00:1b:2c:ba:74:40:
b9:a2:ee:01:1f:ba:66:da:c6:67:cf:33:4f:58:8c:
8b:4f:8d:01:b9:b0:cd:00:93:6d:7c:0d:13:9b:90:
a8:37:90:8d:bd:4c:d8:77:93:cf:a6:0b:48:94:b7:
28:58:85:b5:dc:26:d9:f8:4b:ae:e0:bf:cb:e5:cb:
f4:95:ee:f0:25:82:5f:22:27:ab:1a:79:21:ed:21:
2f:fc:0b:a3:3c:8b:10:a1:04:9c:e3:87:11:70:94:
87:5e:bd:bb:fb:f4:cf:f7:0d:f3:58:92:3a:e7:4b:
1c:b1:cc:3f:1d:a4:99:d3:fa:2f:21:6a:e2:01:49:
17:78:6a:2d:a2:30:a9:f3:15:a3:50:b9:78:78:d9:
a8:98:dc:80:44:aa:f6:e7:77:60:41:f3:0c:ce:6c:
cf:60:c2:3f:7c:c8:da:b8:50:39:c1:3a:18:a6:a0:
3f:54:f2:1d:78:53:c6:ba:f1:9d:ae:ff:97:be:b9:
9f:85:49:fd:72:6a:0d:ee:fd:fa:46:c6:01:f5:1f:
1d:3c:c5:b2:0c:19:db:d3:4d:1a:11:99:88:fc:fe:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A1:B4:CA:02:36:2D:73:28:4E:DC:9F:3B:07:8B:99:B8:4A:FB:2A
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/OqG0ygI2LXMoTtyfOweLmbhK-yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.239.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e3:02:48:a4:b7:ba:57:ef:a6:9d:fb:dc:16:fe:10:02:80:
60:37:a4:f5:53:63:bd:44:53:32:35:14:d9:c6:12:71:4a:ea:
34:38:81:31:57:90:c3:36:6b:e8:fa:fa:94:70:71:e5:a1:81:
05:7a:c6:e4:57:a1:af:27:92:db:34:b4:f7:69:e5:83:32:79:
88:12:b4:63:56:f9:b7:c6:18:42:be:f8:92:40:9a:05:fd:e5:
7c:9e:d3:91:3a:ac:53:75:89:5d:2a:45:19:62:46:fc:3c:76:
63:85:44:31:60:f7:53:58:07:b7:00:03:d8:04:ac:b8:dc:75:
85:da:d6:d4:d5:dc:72:c1:01:24:3e:47:75:ad:1b:d1:9e:d5:
95:1b:1b:66:a7:c1:be:87:e5:7b:89:08:05:79:6c:1d:05:4f:
42:b1:dc:1d:a3:87:f9:e4:fe:fe:66:fe:68:bb:b0:92:14:82:
01:41:f5:62:6b:5e:99:81:44:96:57:27:98:a9:bc:ce:ba:75:
71:a4:7d:5d:2c:f5:46:ca:24:3e:a6:20:f2:76:84:d9:25:a4:
af:88:20:06:f8:bd:e6:d4:69:cd:86:ab:0a:7f:14:39:30:2a:
41:93:e4:f3:b0:dd:c8:ec:fb:6f:cc:d6:2a:c7:28:35:d6:6a:
df:ef:4d:03
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF2ltyDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NDExYWJjNGMwNDY4YWIyODkxZWFhY2FkYmEwZGMwMzc3OTM2ZmQ1MB4XDTIyMDEw
MTA5NTQwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2FhMWI0Y2EwMjM2
MmQ3MzI4NGVkYzlmM2IwNzhiOTliODRhZmIyYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJeYo8C7CH+kQ9nJncGPtgY+NLUUwL5u3lXWCm2pC3VRsS1S
rh0EABssunRAuaLuAR+6ZtrGZ88zT1iMi0+NAbmwzQCTbXwNE5uQqDeQjb1M2HeT
z6YLSJS3KFiFtdwm2fhLruC/y+XL9JXu8CWCXyInqxp5Ie0hL/wLozyLEKEEnOOH
EXCUh169u/v0z/cN81iSOudLHLHMPx2kmdP6LyFq4gFJF3hqLaIwqfMVo1C5eHjZ
qJjcgESq9ud3YEHzDM5sz2DCP3zI2rhQOcE6GKagP1TyHXhTxrrxna7/l765n4VJ
/XJqDe79+kbGAfUfHTzFsgwZ29NNGhGZiPz+k8sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ6obTKAjYtcyhO3J87B4uZuEr7KjAfBgNVHSMEGDAWgBTUEavEwEaKsoke
qsrboNwDd5Nv1TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFCR3J4TUJHaXJLSkhxcksyNkRjQTNlVGI5VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTMvNjE4ZTUzLWFmYzQtNDBkZi04NjEyLWIwZjRiOWMzN2U0OS8x
L09xRzB5Z0kyTFhNb1R0eWZPd2VMbWJoSy15by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMv
NjE4ZTUzLWFmYzQtNDBkZi04NjEyLWIwZjRiOWMzN2U0OS8xLzFCR3J4TUJHaXJL
SkhxcksyNkRjQTNlVGI5VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7k7zANBgkqhkiG9w0BAQsFAAOC
AQEAgeMCSKS3ulfvpp373Bb+EAKAYDek9VNjvURTMjUU2cYScUrqNDiBMVeQwzZr
6Pr6lHBx5aGBBXrG5FehryeS2zS092nlgzJ5iBK0Y1b5t8YYQr74kkCaBf3lfJ7T
kTqsU3WJXSpFGWJG/Dx2Y4VEMWD3U1gHtwAD2ASsuNx1hdrW1NXccsEBJD5Hda0b
0Z7VlRsbZqfBvofle4kIBXlsHQVPQrHcHaOH+eT+/mb+aLuwkhSCAUH1YmtemYFE
llcnmKm8zrp1caR9XSz1RsokPqYg8naE2SWkr4ggBvi95tRpzYarCn8UOTAqQZPk
87DdyOz7b8zWKscoNdZq3+9NAw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:21 2023 by rpki-client on console-ams.rpki-client.org